1. Controller and how to contact us
This website is operated by GravitronX Technologies OÜ ("GX", "we", "us"). We are an Estonian private limited company entered in the Estonian Commercial Register under registry code 17582213.
Registered office: Tartu mnt 67/1-13b, Kesklinna linnaosa, Tallinn, Harju maakond, 10115, Estonia. General enquiries: connect@gravitronx.com. Legal matters: legal@gravitronx.com. See our Legal Notice and the Estonian e-Business Register.
This notice covers the public GX corporate website and inquiries submitted through its contact form. It does not cover separate GX products, customer deployments, employment applications or other services that may have their own notices. We have not designated a data protection officer for the website in this document; if a DPO is appointed, its details will be published here.
2. Personal data we receive
When you contact GX, we may receive your name, work email address, optional company or organisation, inquiry category, message and the later correspondence. You should not send passwords, account recovery information, biometric, health, financial account, government identification or other confidential or special-category data using a general public contact form.
When you visit the site, our hosting and security providers may process network metadata such as the IP address, device/browser details, access times, requested resources and abuse-prevention signals. Browser preference storage is described in the Cookie and Browser Storage Policy. No GX account or user profile is created by simply viewing this site.
3. Purposes and legal bases
We process data for the following identified purposes, on the applicable legal bases under Article 6 of the GDPR:
- Answering inquiries and managing professional correspondence: legitimate interests, Article 6(1)(f), in communicating with individuals and organisations that contact us. Our interests are limited to handling requests and exploring possible relationships.
- Requested pre-contractual steps: Article 6(1)(b) only where the requester is themselves the prospective contracting party and asks us to take steps before a contract.
- Hosting, maintaining and defending the website, including anti-abuse screening: legitimate interests in reliable and secure operation, Article 6(1)(f).
- Compliance with applicable legal obligations: Article 6(1)(c), where an actual legal obligation applies to particular records.
We do not treat a contact-form acknowledgement as consent to direct marketing. We do not subscribe inquiry senders to newsletters or marketing campaigns simply because they contact GX.
4. How your form is handled; recipients
Our public inquiry form uses Netlify Forms. After deployment and activation, form submissions are received and stored in Netlify’s form administration area. Netlify may use Akismet anti-spam filtering. Verified-submission notices can be delivered to our receiving inbox at connect@gravitronx.com when configured; this is not an automatic response to the sender.
Access may be available to GX personnel handling the inquiry and to service providers supplying hosting, technical security, anti-abuse screening and email services, subject to their respective service terms and legal arrangements. We do not sell contact-form information. We do not publish inquiries. Do not submit sensitive information through this form.
5. International processing and safeguards
Some service providers or their subprocessors may process personal data outside Estonia or the European Economic Area. Where international transfers are subject to GDPR restrictions, the applicable provider arrangements, adequacy decisions or appropriate safeguards are relevant. To request details of the arrangements applicable to your information, contact legal@gravitronx.com.
6. Storage and deletion criteria
We keep inquiry details only while they are needed to answer and follow up on the inquiry, assess a requested prospective relationship or deal with a relevant legal obligation or dispute. When an inquiry is closed, we assess whether its details remain necessary and should be deleted. Correspondence relevant to a continuing relationship, legal obligation or actual legal claim may need to be retained longer. You may request information about the retention applicable to your inquiry or request deletion at legal@gravitronx.com.
Netlify may hold submitted data and spam records until administrators delete them in line with its service functionality. Submitted data and spam records may remain in the form administration service until deleted by administrators. Hosting logs are managed under the provider’s applicable retention rules.
7. Choices, rights and complaints
Subject to applicable conditions and limitations, you may request confirmation of processing, access to personal data, correction, deletion, restriction, portability where applicable and objection to processing based on legitimate interests. Where processing depends on consent, you may withdraw that consent without affecting earlier lawful processing. The website does not conduct legally significant automated decision-making about visitors.
Send a rights request to legal@gravitronx.com or connect@gravitronx.com. We may seek limited information to confirm identity where necessary. Under GDPR Article 12, responses are normally due within one month, with lawful extensions where justified.
You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or another competent data protection supervisory authority.
8. Browser storage, tracking and analytics
The current GX site uses limited session/local browser storage for the cinematic introduction and animation preferences. It has no GX-operated third-party advertising pixels or marketing analytics in this release. Details of the stored keys, their purpose, and how to clear or control them appear in our Cookie and Browser Storage Policy. Any later addition of optional analytics, advertising tags or other non-essential access to device storage requires an appropriate legal assessment and consent mechanism where applicable.
9. Security, children and changes
We apply appropriate technical and organisational precautions consistent with the nature of this informational website, while recognising that no network transmission or storage method is completely risk-free. The site is designed for professional and general informational audiences and is not directed at children. We may update this notice when the form, providers, data uses or legal requirements change; the last-reviewed date records the current document version.